$ rpki-client -vvf rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft File: BHuLKVTEerFcV1ht0ATriTl3xa8.mft (raw, json) Hash identifier: rYiAE3iben68cJqZPbdMsZlJ+ZUu+qJUC5h13bwPDjk= Subject key identifier: 13:34:67:B8:06:4D:1C:25:09:26:B6:F4:F0:34:FE:47:7C:A5:8A:6E Authority key identifier: 04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF Certificate issuer: /CN=A918E8EB/serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF Certificate serial: 129D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft Manifest number: 128B Signing time: Fri 22 Aug 2025 17:13:11 +0000 Manifest this update: Fri 22 Aug 2025 17:13:11 +0000 Manifest next update: Fri 29 Aug 2025 17:13:11 +0000 Files and hashes: 1: BHuLKVTEerFcV1ht0ATriTl3xa8.crl (hash: Vmepcu/9FqXUUBc+VBNfZaF4tGIX1KZvOZy3JzTYrkM=) 2: 3489528EC84511ED90A61540C4F9AE02.roa (hash: 0GBU9clR4v/kv/m8Iw+tpC8pBR8oX1ZqIKf4DgtvCco=) 3: 35615A30C84511ED90A61540C4F9AE02.roa (hash: CfO3CZyouhq3VXYxiVm5tnc8saneiKp2zLb93JcMMQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:13:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4765 (0x129d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E8EB, serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF Validity Not Before: Aug 22 17:13:11 2025 GMT Not After : Aug 29 17:13:11 2025 GMT Subject: CN=68a8a527-f470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:04:c1:a1:89:40:75:33:5d:47:ab:06:b0:4b: fa:fe:f4:5f:ed:d2:9a:79:53:1d:8c:fb:cf:a1:24: 96:72:86:7b:9e:26:71:05:91:c8:74:94:24:f0:60: 5b:0c:65:1b:4e:d9:ab:67:85:dc:ce:e7:d4:99:79: f1:c7:1f:18:be:d0:22:2b:9b:d9:9d:b4:64:8d:35: c0:85:e0:b8:69:a4:21:f9:e5:f2:f4:fb:f5:44:26: fb:fb:e2:75:5a:3e:90:77:6f:61:e0:2e:a1:d5:33: 83:4f:00:9c:1a:b5:78:aa:39:60:d2:c8:49:f6:43: a2:04:da:8a:14:36:2d:dd:40:ed:34:81:96:2a:08: 6b:26:b3:f8:b3:6e:6c:b6:0f:60:c2:b9:7b:c8:ba: b2:75:25:c1:86:26:73:4d:15:3c:20:7d:e6:53:8b: 08:3c:90:4a:e7:0a:fb:86:33:22:ba:63:d3:4f:14: da:e8:89:12:bd:d9:d2:b2:c1:d2:0e:d5:b6:39:35: 35:96:db:90:92:12:ca:52:44:7f:fb:51:ab:9b:72: f3:b6:83:e7:22:d2:6f:e0:64:0d:67:fe:fa:2c:33: a3:fc:9f:c4:97:3c:0f:a1:90:c1:17:fb:6c:27:b7: 60:f9:ad:05:1a:40:2c:fe:5b:a2:7d:b1:0f:b7:c7: 75:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:34:67:B8:06:4D:1C:25:09:26:B6:F4:F0:34:FE:47:7C:A5:8A:6E X509v3 Authority Key Identifier: keyid:04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:e2:57:43:f6:1e:73:9e:58:c0:b3:66:6a:99:5c:88:5c:c9: 4e:c6:04:88:12:61:66:5b:f9:8c:29:4c:b6:e0:9a:59:40:b8: ee:cc:63:1e:d6:70:ab:48:d4:4b:f7:62:36:28:9e:77:dd:d5: e4:bb:9e:6c:d3:48:66:ab:e7:4a:5e:2b:53:14:a3:a3:fa:8e: 1d:2f:bc:40:f9:b1:56:02:6c:11:13:bf:3c:df:df:2b:8e:ca: d3:a7:ba:78:b2:51:61:2b:65:84:52:c4:fd:28:63:9b:79:8b: aa:eb:78:e7:6b:b8:9b:5c:0d:e9:02:24:b7:01:23:2d:7b:12: e3:9d:e7:3f:48:27:53:77:e2:9f:ba:8a:0c:98:b9:68:ae:4e: d8:5e:53:70:33:55:b2:03:3c:36:89:4b:12:08:4a:be:4d:80: 1a:32:ab:fa:fd:33:89:4c:99:a7:a6:6d:ed:d5:ab:81:8c:c5: a5:bd:b2:27:47:bc:5e:eb:e6:2e:13:f4:75:73:33:f1:7d:73: b3:c5:50:ee:a2:49:f6:be:13:65:c2:8d:9b:24:4f:ab:92:96: 64:3c:32:bc:e9:1c:88:57:93:66:35:5e:b3:85:e8:3b:6a:ab: 49:7e:21:83:eb:62:a2:02:65:9a:38:ea:f5:14:31:1e:4d:0d: c5:e5:21:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4RUIxMTAvBgNVBAUTKDA0N0I4QjI5NTRDNDdBQjE1QzU3NTg2REQwMDRFQjg5 Mzk3N0M1QUYwHhcNMjUwODIyMTcxMzExWhcNMjUwODI5MTcxMzExWjAYMRYwFAYD VQQDEw02OGE4YTUyNy1mNDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygTBoYlAdTNdR6sGsEv6/vRf7dKaeVMdjPvPoSSWcoZ7niZxBZHIdJQk8GBb DGUbTtmrZ4XczufUmXnxxx8YvtAiK5vZnbRkjTXAheC4aaQh+eXy9Pv1RCb7++J1 Wj6Qd29h4C6h1TODTwCcGrV4qjlg0shJ9kOiBNqKFDYt3UDtNIGWKghrJrP4s25s tg9gwrl7yLqydSXBhiZzTRU8IH3mU4sIPJBK5wr7hjMiumPTTxTa6IkSvdnSssHS DtW2OTU1ltuQkhLKUkR/+1Grm3LztoPnItJv4GQNZ/76LDOj/J/ElzwPoZDBF/ts J7dg+a0FGkAs/luifbEPt8d1+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBM0Z7gG TRwlCSa29PA0/kd8pYpuMB8GA1UdIwQYMBaAFAR7iylUxHqxXFdYbdAE64k5d8Wv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RThFQi9EMDM5RjhENkQx QkYxMUU4QjI2NEY2NUFDNEY5QUUwMi9CSHVMS1ZURWVyRmNWMWh0MEFUcmlUbDN4 YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JIdUxLVlRFZXJGY1YxaHQwQVRyaVRsM3hhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RThFQi9EMDM5RjhENkQxQkYxMUU4QjI2NEY2NUFDNEY5QUUwMi9CSHVMS1ZURWVy RmNWMWh0MEFUcmlUbDN4YTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJ4ldD9h5znljAs2ZqmVyIXMlOxgSIEmFmW/mMKUy24JpZQLjuzGMe 1nCrSNRL92I2KJ533dXku55s00hmq+dKXitTFKOj+o4dL7xA+bFWAmwRE788398r jsrTp7p4slFhK2WEUsT9KGObeYuq63jna7ibXA3pAiS3ASMtexLjnec/SCdTd+Kf uooMmLlork7YXlNwM1WyAzw2iUsSCEq+TYAaMqv6/TOJTJmnpm3t1auBjMWlvbIn R7xe6+YuE/R1czPxfXOzxVDuokn2vhNlwo2bJE+rkpZkPDK86RyIV5NmNV6zheg7 aqtJfiGD62KiAmWaOOr1FDEeTQ3F5SHm -----END CERTIFICATE-----Generated at Sun Aug 24 00:45:47 2025 by rpki-client